AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Previously Presented) A method for analyzing data content received at a local 
area network from an external communications network, wherein the method 
comprises: 

receiving unanalyzed content at a local area network; 

passing the unanalyzed content to a switch in the local area network; 

analyzing the unanalyzed content at the switch and generating analyzed 

data; and 

routing the analyzed data to a device in the local area network in 
communication with the switch, wherein the switch comprises a plurality of ports, and 
wherein analyzing the unanalyzed content at the switch comprises the switch scanning 
the plurality of ports and applying a content analysis algorithm to each of the plurality of 
ports. 

2. (Previously Presented) The method of claim 1 , wherein the step of analyzing the 
unanalyzed content comprises applying a content filtering algorithm to the unanalyzed 
content upon ingress at one of the plurality of ports. 

3. (Previously Presented) The method of claim 1 , wherein the step of analyzing the 
unanalyzed content comprises applying a content filtering algorithm to the unanalyzed 
content upon egress at one of the plurality of ports. 

4. (Original) The method of claim 1 wherein the unanalyzed content is formatted in 
data packets. 

5. (Previously Presented) The method of claim 4, wherein analyzing the unanalyzed 
content at the switch comprises the switch applying the content analysis algorithm to 
each data packet of unanalyzed content. 
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6. (Previously Presented) The method of claim 5, wherein the switch applying the 
content analysis algorithm comprises the switch executing an anti-virus algorithm. 

7. (Previously Presented) The method of claim 5, wherein the switch applying the 
content analysis algorithm comprises the switch executing an intrusion detection 
algorithm. 

8. (Canceled). 

9. (Previously Presented) The method of claim 1 , wherein each of the plurality of 
ports comprises a dedicated processor and each dedicated processor for a respective 
port independently applies a separate content analysis algorithm to unanalyzed content 
at the port, whereby each of the plurality of ports analyzes content with its respective 
processor. 

10. (Original) The method of claim 1 , further comprising receiving a content analysis 
software update at the switch from a managed service provider network via the external 
communications network. 



1 1 . (Previously Presented) The method of claim 10, further comprising applying the 
content analysis software update to each of the plurality of ports at the switch 
configured to implement content analysis software contained in the content analysis 
software update. 

12. (Currently Amended) A method of managing content analysis for a local area 
network from a managed service provider network, wherein the local area network 
comprises a switch in communication with an external communications network and at 
least one device in communication with the switch, wherein the method comprises: 

establishing a communication link between the switch of the local area 
network and the managed service provider network via the external communications 
network; 

transmitting port configuration instructions from the managed service 
provider network to the switch of the local area network, the port configuration 
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instructions comprising instructions to configure a plurality of ports on a port-to-port 
basis at the switch to implement at least one content analysis function and to cause the 
switch to scan and apply the at least one content analysis function to eaeh a selected 
port of the plurality of ports. 

13. (Previously Presented) The method of claim 12, further comprising: 

receiving a content analysis software update at the managed service 
provider network; 

transmitting the content analysis software update to the switch and 
updating content analysis software at the switch with the content analysis software 
update. 

14. (Original) The method of claim 12, further comprising monitoring content analysis 
activity at the switch from the managed service provider network. 

15. (Previously Presented) A method of providing content analysis policy to a 
plurality of networks, the method comprising: 

establishing a communication link between a switch in each of a plurality 
of subscriber networks and an application management appliance of a managed 
service provider network via an external communications network; 

transmitting one of instructions or update information for a content 
analysis application from the application management appliance to the switch in each of 
the plurality of subscriber networks; and 

receiving performance metrics of the content analysis application from 
each of the plurality of subscriber networks, wherein the switch in each of the plurality of 
subscriber networks comprises a plurality of ports, and wherein receiving performance 
metrics comprises receiving performance metrics for each of the plurality of ports in 
substantially real time. 

16. (Currently Amended) A local area network switch system having content analysis 
capabilities comprising: 
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a billing server: 

a plurality of ports in communication with the billing server, each of the 
ports configured for communication with a respective external device, each of the 
plurality of ports comprising: 

an interface connection adapted for connecting with a 
communication line of an external device; 

a processor in communication with the interface connection; 
a memory in communication with the processor; 
an application buffer in communication with the processor and the 
memory, wherein the application buffer contains logic operative on the processor 
to analyze a content of information passing between the external device and the 
port; and 

a communication bus in communication with each of the plurality of 
ports, the communication bus adapted to carry information between the plurality 
of ports, wherein the switch is configured to analyze the content of information 
passing through each of the plurality of ports A 

wherein the billing server is operable to track charges for content analysis 
services and bill on a per port basis . 

17. (Previously Presented) The apparatus of claim 16 further comprising an 
application buffer administrative interface in communication with the communication 
bus, wherein the application buffer administrative interface comprises content analysis 
resources accessible by the application buffer for each of the plurality of ports. 

18. (Original) The apparatus of claim 16, wherein at least one of the application 
buffers comprises anti-virus filtering logic. 

19. (Original) The apparatus of claim 16, wherein at least one of the application 
buffers comprises network security logic. 

20. (Original) The apparatus of claim 16, wherein at least one of the application 
buffers comprises content filtering logic. 
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21 . (Previously Presented) The apparatus of claim 17, wherein the application buffer 
administrative interface comprises anti-virus definitions adapted for use by anti-virus 
logic stored on an application buffer at each of the plurality of ports. 



Page 6 of 12 



